The Cronos network has been halted following a major exploit targeting Tectonic, the DeFi lending protocol that held approximately $121.6 million in total value locked, roughly 46% of all Cronos DeFi TVL, before the attack hit.
The attacker targeted TONIC, Tectonic’s illiquid governance token, and drove its price up approximately 100-fold in roughly 20 minutes. With the artificially inflated TONIC posted as collateral, the attacker borrowed large amounts of harder assets from Tectonic’s lending pools, an estimated $75 million in total.
It’s the same technique Avraham Eisenberg used to drain over $100 million from Solana-based Mango Markets in October 2022.
Where the Money Went, and Where It Did Not
The attacker began moving proceeds across a bridge to Ethereum, the only exit route off the Cronos chain. Approximately $6.29 million made it across before validators halted block production on Cronos, freezing the network in place.
Around $60 million remains stranded on the frozen chain, unable to move. That means roughly 91% of the estimated haul is effectively locked. It is waiting on a decision from validators about what happens when the network restarts.
Some on-chain estimates put the total at risk as high as $119.5 million, but that figure remains unconfirmed and may conflate assets at risk with assets actually drained.
Moreover, Cronos confirmed the exploit and halted the network. Tectonic acknowledged the incident and advised users not to interact with the protocol until it is confirmed safe. Neither has officially confirmed the exact losses or disclosed the root cause publicly.
Crypto.com CEO Kris Marszalek confirmed that the Crypto.com app and exchange were not affected and are operating normally. All user funds on the platform are safe. Crypto.com’s security team is actively supporting the Cronos investigation.
Notably, Cronos was originally developed by Crypto.com, while Tectonic operates independently as a DeFi lending protocol on the network. Also, no restart timeline for the Cronos network has been announced. Furthermore, how the attacker’s stranded assets will be handled post-restart remains an open question.
The Exploit’s Market Impact
An exploit of this scale hitting 46% of a chain’s DeFi TVL in a single attack freezes user confidence alongside the network itself. The frozen $60 million creates a significant situation: the attacker can’t move the funds, but neither can anyone else until validators decide what comes next.
That decision will define how Cronos handles the recovery and whether the DeFi ecosystem on the chain survives the reputational damage.
Crypto Market Highlights
Bitcoin (BTC) Is Mirroring 2022: Does That Put $83K on the Table?
